---
title: "Per-agent authorization rollup"
method: GET
path: "/api/registry/publisher/authorization"
tags: ["Authorization Lookups"]
---

# Per-agent authorization rollup

`GET /api/registry/publisher/authorization`

Returns whether a given agent is authorized for a publisher domain and how many of the publisher's properties it can sell. When the agent has property-level authorization rows, the count is the intersection with the publisher's property set; when it only has a publisher-wide row, the count equals the total. Returns 404 when the agent has no authorization (publisher-wide or property-level) for the domain.

## Query parameters

- `domain` string, required
- `agent` string, required

## Response `200`

Authorization rollup

- object
  - `publisher_domain` string, required
  - `agent_url` string, required
  - `authorized` integer, required — Count of publisher's properties the agent can sell.
  - `total` integer, required — Total properties the publisher exposes.
  - `publisher_wide` boolean, required — True when the agent has only a publisher-wide authorization (no property-level rows). In that case `authorized` equals `total`.
  - `source` 'adagents_json' | 'agent_claim', required
  - `authorized_for` string
  - `unauthorized_properties` object[], required — Properties the agent is NOT authorized for. Empty when publisher_wide is true.
    - `id` string
    - `name` string
    - `type` string

## Other responses

- `400` — Missing domain or agent
- `404` — No authorization record for this agent on this publisher

---

[API](https://skmtc.net/adcontextprotocol/apis/agenticadvertising-org-registry-api.md) · [All operations](https://skmtc.net/adcontextprotocol/apis/agenticadvertising-org-registry-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/adcontextprotocol/agenticadvertising-org-registry-api/revisions/9ea7fedf54c0/schema)